Rule - H3C S5830V2 Command Reference Manual

Usage guidelines
The L2 feature group includes all Layer 2 feature commands, and the L3 feature group includes all
Layer 3 feature commands. These predefined feature groups are not user configurable.
In addition to the predefined feature groups L2 and L3, you can create up to 64 user role feature
groups.
After you create a user role feature group, you can use the display role feature command to display
the features available in the system. Then you can use the feature command to add features to the
feature group.
Examples
# Create the feature group security-features.
<Sysname> system-view
[Sysname] role feature-group name security-features
[Sysname-featuregrp-security-features]
Related commands
•
display role feature-group
•
display role feature
•
feature

rule

Use rule to create or change a user role rule for controlling command, XML element, or MIB node
access.
Use undo rule to delete a user role rule.
Syntax
rule number { deny | permit } { command command-string | { execute | read | write } * { feature
[ feature-name ] | feature-group feature-group-name | oid [ oid-string ] | xml-element
[ xml-string ] } }
undo rule { number | all }
Default
A user-defined user role does not have any rules and cannot access any commands, XML elements,
or MIB nodes.
Views
User role view
Predefined user roles
network-admin
Parameters
number: Specifies a rule number in the range of 1 to 256.
deny: Denies access to any specified commands, XML elements, or MIB nodes.
permit: Permits access to any specified commands, XML elements, or MIB nodes.
command command-string: Specifies a command string. The command-string argument is a
case-sensitive string of 1 to 128 characters, including the following characters:
•
The wildcard asterisk (*).
•
The delimiters space and tab.
61